Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File: sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier: pq+mzRvVzaimKZw1A3Cro5ATzCs+MCl+JFvUMI8MFFk=
Subject key identifier: 1F:0A:AB:2A:94:1F:11:3C:94:F7:A2:51:1A:1C:B1:86:C7:77:59:71
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer: /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial: 06E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number: 0A75
Signing time: Fri 28 Mar 2025 19:48:27 +0000
Manifest this update: Fri 28 Mar 2025 19:48:27 +0000
Manifest next update: Fri 04 Apr 2025 19:48:27 +0000
Files and hashes: 1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: KT7ddbu60X9QvYkG2P/faEXoktJ1GjrkU//bYfj247g=)
2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1760 (0x6e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913EE77
Validity
Not Before: Mar 28 19:48:27 2025 GMT
Not After : Apr 4 19:48:27 2025 GMT
Subject: CN=67e6fd0b-f879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:e9:77:08:ea:03:d9:46:9e:c1:57:a9:b4:
09:c6:73:a1:56:b4:31:9a:4a:9b:71:ed:6a:33:be:
5f:7d:6a:15:32:cb:1e:9a:a6:da:44:cc:e8:f6:76:
ab:7e:f7:f0:93:ec:55:18:71:98:96:74:dd:ed:19:
54:7e:33:bf:f1:ab:2c:60:a4:bb:e8:56:a9:96:18:
ce:c9:27:7a:79:18:c8:6b:7e:33:9c:a8:e9:8a:89:
c1:74:48:15:a4:99:23:ca:10:9e:32:fc:2a:2b:f1:
1b:02:cb:30:05:2f:16:9f:94:cc:20:ae:2a:f9:44:
44:ea:05:ff:49:5f:29:81:2b:74:fb:c2:a3:5e:79:
ca:9b:c8:02:08:d0:26:e7:4f:d1:51:7c:d3:64:36:
62:96:a8:5d:bc:0c:ed:fa:db:9b:49:4d:95:db:17:
73:89:5c:0e:cd:e2:c8:fd:54:3b:44:a3:0f:2b:92:
f6:e5:74:a3:c4:58:2e:f8:53:ed:89:c8:17:00:00:
43:bf:88:23:60:1b:0d:89:14:76:13:ad:74:44:18:
f3:3b:e1:c6:c0:6a:b6:0f:3a:6a:49:d0:56:50:cb:
12:de:a3:66:95:26:9a:d5:4e:cd:34:5e:78:2b:6f:
08:3c:ae:05:f7:90:fb:5f:0a:02:cf:23:b2:ba:38:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0A:AB:2A:94:1F:11:3C:94:F7:A2:51:1A:1C:B1:86:C7:77:59:71
X509v3 Authority Key Identifier:
keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:7d:39:d2:35:31:a1:ff:5b:fe:74:7b:0e:a9:5f:e9:43:
2b:6f:33:a2:bd:54:c0:31:c5:ca:a0:a7:35:a0:ec:65:71:89:
45:d8:25:63:67:31:ca:51:d4:8e:a3:2b:78:67:89:1c:22:11:
07:cc:1a:ff:05:6b:8e:eb:39:08:6f:7b:17:fc:8f:4d:20:ed:
8f:bc:3b:49:83:da:2a:0a:b1:90:c6:e9:ea:d5:52:62:67:b4:
1a:77:b9:3a:c7:38:b6:cd:6a:2b:27:fa:34:8a:c5:47:a4:f7:
a8:34:29:22:23:82:02:f6:75:72:87:94:8e:94:6b:5a:9c:0f:
98:68:58:fd:31:38:35:84:5f:13:a2:06:03:fd:b6:d8:84:db:
d7:10:56:43:5a:32:23:41:5b:e2:56:2b:9d:aa:5c:1f:42:c0:
6f:39:4c:e9:e9:ec:73:9b:f0:5f:db:00:50:d9:da:98:12:f7:
50:16:d8:d0:e6:23:7e:cc:bb:7b:a2:2f:39:33:24:32:60:52:
a4:16:dd:df:25:9c:53:bc:4a:29:89:77:82:48:e2:76:fd:04:
47:b4:43:ad:54:bd:28:b2:e7:1a:13:fb:b7:9d:ee:86:3c:03:
d6:fb:28:05:0c:1e:ca:1c:b0:5e:07:2d:e8:3c:cd:e7:bd:27:
a1:09:bb:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE
MDAwM0NEQ0MwHhcNMjUwMzI4MTk0ODI3WhcNMjUwNDA0MTk0ODI3WjAYMRYwFAYD
VQQDEw02N2U2ZmQwYi1mODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7fLpdwjqA9lGnsFXqbQJxnOhVrQxmkqbce1qM75ffWoVMssemqbaRMzo9nar
fvfwk+xVGHGYlnTd7RlUfjO/8assYKS76FaplhjOySd6eRjIa34znKjpionBdEgV
pJkjyhCeMvwqK/EbAsswBS8Wn5TMIK4q+URE6gX/SV8pgSt0+8KjXnnKm8gCCNAm
50/RUXzTZDZilqhdvAzt+tubSU2V2xdziVwOzeLI/VQ7RKMPK5L25XSjxFgu+FPt
icgXAABDv4gjYBsNiRR2E610RBjzO+HGwGq2DzpqSdBWUMsS3qNmlSaa1U7NNF54
K28IPK4F95D7XwoCzyOyujgJdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8KqyqU
HxE8lPeiURocsYbHd1lxMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2
RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu
M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDQn050jUxof9b/nR7Dqlf6UMrbzOivVTAMcXKoKc1oOxlcYlF2CVj
ZzHKUdSOoyt4Z4kcIhEHzBr/BWuO6zkIb3sX/I9NIO2PvDtJg9oqCrGQxunq1VJi
Z7Qad7k6xzi2zWorJ/o0isVHpPeoNCkiI4IC9nVyh5SOlGtanA+YaFj9MTg1hF8T
ogYD/bbYhNvXEFZDWjIjQVviViudqlwfQsBvOUzp6exzm/Bf2wBQ2dqYEvdQFtjQ
5iN+zLt7oi85MyQyYFKkFt3fJZxTvEopiXeCSOJ2/QRHtEOtVL0osucaE/u3ne6G
PAPW+ygFDB7KHLBeBy3oPM3nvSehCbtQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:05:03 2025 by rpki-client